Analysis
- max time kernel
153s - max time network
161s - platform
windows10-2004_x64 - resource
win10v2004-20231215-en - resource tags
- submitted
14/02/2024, 02:42
General
- Target 9a8c95c65bfbf55312d5ef9476a7f584.exe
- Size 131KB
- Sample240214-c646mseh5v
- SHA256 ac1d73cd9f72e7ca573c78be48ae84b643fa3778e49fc22d617f65cfdcc1fb54
Malware Config
Signatures
- Adds Run key to start application 2 TTPs 1 IoCs
- Drops file in Windows directory 2 IoCs
- Modifies Internet Explorer settings 1 TTPs 2 IoCs
- Suspicious behavior: EnumeratesProcesses 64 IoCs
- Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\9a8c95c65bfbf55312d5ef9476a7f584.exe"C:\Users\Admin\AppData\Local\Temp\9a8c95c65bfbf55312d5ef9476a7f584.exe"1⤵
- Adds Run key to start application
- Drops file in Windows directory
- Modifies Internet Explorer settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
memory/220-0-0x0000000002070000-0x0000000002088000-memory.dmp
memory/220-1-0x0000000000400000-0x000000000043D000-memory.dmp
memory/220-5267-0x0000000000400000-0x000000000043D000-memory.dmp
memory/220-14847-0x0000000000400000-0x000000000043D000-memory.dmp
memory/220-21917-0x0000000000400000-0x000000000043D000-memory.dmp
memory/220-24198-0x0000000000400000-0x000000000043D000-memory.dmp
memory/220-31092-0x0000000000400000-0x000000000043D000-memory.dmp
memory/220-38535-0x0000000000400000-0x000000000043D000-memory.dmp
memory/220-46982-0x0000000000400000-0x000000000043D000-memory.dmp
memory/220-55673-0x0000000000400000-0x000000000043D000-memory.dmp
memory/220-61777-0x0000000000400000-0x000000000043D000-memory.dmp
memory/220-69560-0x0000000000400000-0x000000000043D000-memory.dmp
memory/220-78169-0x0000000000400000-0x000000000043D000-memory.dmp
memory/220-85732-0x0000000000400000-0x000000000043D000-memory.dmp
memory/220-93075-0x0000000000400000-0x000000000043D000-memory.dmp
memory/220-98041-0x0000000000400000-0x000000000043D000-memory.dmp
memory/220-98044-0x0000000003EF0000-0x0000000003EF1000-memory.dmp
memory/220-98045-0x0000000003EF0000-0x0000000003EF4000-memory.dmp
memory/220-98046-0x0000000000400000-0x000000000043D000-memory.dmp